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□ 


L8 


L6 same (malicious or virus or intru$) 


27 


□ 


L7 


LI and L6 


12 


□ 


L6 


14 near 12 (external or remov$) 


2620 


□ 


L5 


11 and L4 


134 


□ 


L4 


L2 near5 (memory or process$2 or program$l or applications 1) 


67293 


□ 


L3 


L2 near5 memory 


21883 


□ 


L2 


copy$3 or dump$3 


365079 


□ 


LI 


726/22.ccls or 726/23 .eels, or 726/24.ccls. 


916 
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□ 


L20 


L18andL6 


37 


□ 


L19 


LI 8 same L6 


0 


□ 


L18 


LI 5 near7 (process$2 or program$l or applications 1) 


4943 


□ 


L17 


LI 6 same (detect$3 or sens$3) 


1007 


□ 


L16 


LI 5 same (process$2 or program$l or applications 1) 


11113 


□ 


L15 


(copy$3 or dump$3) near5 memory 


21883 


□ 


L14 


L8andL12 


24 


□ 


L13 


L8 same L12 


0 


□ 


L12 


dump$3 near7 memory 


2181 


o 


Lll 


L3 and L8 


2 


□ 


L10 


L2 same L8 


13 


□ 


L9 


L2 and L8 


340 


D 


L8 


L5 near3 (detect$3 or sens$3) 


8869 


□ 


L7 


L6 and L2 


438 


□ 


L6 


L5 same (detect$3 or sens$3) 


13462 


□ 


L5 


intrusion or intrud$3 


53920 


□ 


L4 


LI andL3 


1 




L3 


L2 same (external device) 


395 


□ 


L2 


copy$3 same memory 


49715 


n 


LI 


rootkitSl 


45 
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